$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa File: ADBB651E043411ED9F02B325C4F9AE02.roa (raw, json) Hash identifier: cddNE6Chf1nZGt0cOcCcSrNF4VTM1nV8tD0C7wKaK+M= Subject key identifier: 0A:B2:E9:7F:4A:38:A6:F0:34:EA:6E:41:FE:EB:6B:8B:FB:6F:4A:2D Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 02B4 Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa Signing time: Fri 01 Mar 2024 03:35:32 +0000 ROA not before: Fri 01 Mar 2024 03:35:32 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 142403 IP address blocks: 103.146.158.0/24 maxlen: 24 103.146.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Mar 1 03:35:32 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65e14d04-b5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:03:83:02:63:b0:27:37:0a:cf:f4:94:3f: 79:65:0c:17:aa:81:1d:95:b8:af:05:b7:5a:90:62: 7b:f8:70:3a:cd:ac:ba:b5:fc:58:f4:d3:a3:33:a0: 68:d2:3b:51:3d:53:b7:fc:8e:55:58:ec:e1:bb:0f: 81:97:4c:c5:40:c1:63:0e:21:7c:41:b1:25:08:a9: ea:0d:8d:d8:ca:89:b6:7f:c0:8c:ec:87:d1:e6:a2: 17:00:63:97:ce:74:75:41:e4:71:8d:2d:7c:f1:41: b1:b9:d2:86:4d:e2:24:ae:2f:ef:d4:7d:7b:9f:0b: b6:26:02:44:83:33:ea:8a:ba:98:a2:31:5d:a9:1c: ff:fe:6e:76:da:a9:c3:dc:90:01:22:90:be:8b:2c: 7b:8a:e6:74:bb:77:3a:db:bb:c0:6c:99:f7:bd:7a: 41:66:af:08:1d:d3:14:4c:d7:22:95:39:56:7e:f2: 9b:a2:a4:16:3d:bd:02:b7:8a:48:3e:65:07:2c:95: 0f:fc:bf:a2:13:1e:5b:78:92:4b:03:69:61:20:19: e0:85:79:b4:1f:af:4a:81:8f:a9:99:37:f3:2f:0f: 63:4a:18:49:e3:d9:f3:d7:f8:87:ed:34:66:6d:2a: 99:4c:38:95:e3:fc:0e:4b:be:c6:c7:7e:92:af:c4: 94:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B2:E9:7F:4A:38:A6:F0:34:EA:6E:41:FE:EB:6B:8B:FB:6F:4A:2D X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.158.0/23 Signature Algorithm: sha256WithRSAEncryption 92:4d:d3:7b:13:bc:97:9a:7a:b4:5f:37:81:1c:40:ac:33:df: 8f:80:44:a4:df:cf:5b:73:41:5a:a3:a4:b7:31:e3:17:7d:50: 94:a3:cb:8b:23:da:a0:c9:a2:d9:69:91:07:44:c2:c1:ce:c9: ba:6e:63:bd:f0:ba:53:79:d2:94:bb:eb:c8:22:7c:4f:3a:46: 77:bd:ae:94:d5:ec:e1:89:dd:ee:f6:c2:6b:bd:f7:41:00:8c: b7:4e:73:be:05:bd:26:18:a0:61:d2:7e:83:3f:cd:51:61:4c: 0c:c9:69:31:93:6a:8c:e5:9f:ff:e9:6a:bb:f5:e6:a5:9a:ca: fb:e1:61:e4:31:cf:d0:ff:b0:ca:4a:24:4d:84:b2:df:27:a7: da:0b:ca:cd:7e:c6:f8:d6:90:4a:59:a7:2a:36:ea:f4:f9:11: ee:21:2e:19:a6:6b:7d:c5:1d:50:e1:74:12:d2:53:9b:74:36: e7:ef:20:2d:e3:a2:59:93:01:2c:7c:94:a1:d9:e1:a5:40:3c: a5:4e:95:08:7d:85:ff:f9:82:77:42:df:e5:ec:6c:fc:cb:cb: 2c:6f:03:d4:d3:95:de:77:65:12:b8:95:c4:a1:47:63:b4:69: 26:a2:30:27:c9:dd:c8:a9:03:0e:35:18:52:36:e6:c6:39:59: 0f:e8:49:a6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjQwMzAxMDMzNTMyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUxNGQwNC1iNWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJgDgwJjsCc3Cs/0lD95ZQwXqoEdlbivBbdakGJ7+HA6zay6tfxY9NOjM6Bo 0jtRPVO3/I5VWOzhuw+Bl0zFQMFjDiF8QbElCKnqDY3Yyom2f8CM7IfR5qIXAGOX znR1QeRxjS188UGxudKGTeIkri/v1H17nwu2JgJEgzPqirqYojFdqRz//m522qnD 3JABIpC+iyx7iuZ0u3c627vAbJn3vXpBZq8IHdMUTNcilTlWfvKboqQWPb0Ct4pI PmUHLJUP/L+iEx5beJJLA2lhIBnghXm0H69KgY+pmTfzLw9jShhJ49nz1/iH7TRm bSqZTDiV4/wOS77Gx36Sr8SU1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAqy6X9K OKbwNOpuQf7ra4v7b0otMB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg1OUEvQkFDQUI3RUM5REZFMTFFQ0I4N0Y1MTQ3QzRGOUFFMDIvQURCQjY1MUUw NDM0MTFFRDlGMDJCMzI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkp4wDQYJKoZIhvcNAQELBQADggEBAJJN03sTvJeaerRf N4EcQKwz34+ARKTfz1tzQVqjpLcx4xd9UJSjy4sj2qDJotlpkQdEwsHOybpuY73w ulN50pS768gifE86Rne9rpTV7OGJ3e72wmu990EAjLdOc74FvSYYoGHSfoM/zVFh TAzJaTGTaozln//parv15qWayvvhYeQxz9D/sMpKJE2Est8np9oLys1+xvjWkEpZ pyo26vT5Ee4hLhmma33FHVDhdBLSU5t0NufvIC3jolmTASx8lKHZ4aVAPKVOlQh9 hf/5gndC3+XsbPzLyyxvA9TTld53ZRK4lcShR2O0aSaiMCfJ3cipAw41GFI25sY5 WQ/oSaY= -----END CERTIFICATE-----Generated at Fri May 17 04:44:30 2024 by rpki-client on console-ams.rpki-client.org